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Abstract — This paper examines linear beamforming 
metliods for secure communications in a multiuser wiretap 
channel with a single transmitter, multiple legitimate 
receivers, and a single eavesdropper, where all nodes 
are equipped with multiple antennas. No information 
regarding the eavesdropper is presumed at the transmitter, 
and we examine both the broadcast MIMO downlink with 
independent information, and the multicast MIMO down- 
link with common information for all legitimate receivers. 
In both cases the information signal is transmitted with 
just enough power to guarantee a certain SINR at the 
desired receivers, while the remainder of the power is 
used to broadcast artificial noise. The artificial interference 
selectively degrades the passive eavesdropper's signal while 
remaining orthogonal to the desired receivers. We analyze 
the confidentiality provided by zero-forcing and optimal 
minimum-power beamforming designs for the broadcast 
channel, and optimal minimum-MSE beamformers for 
the multicast channel. Numerical simulations for the rel- 
ative SINR and BER performance of the eavesdropper 
demonstrate the effectiveness of the proposed physical- 
layer security schemes. 



I. INTRODUCTION 

The growing interest in security at the physical layer 
of wireless communications has sparked a resurgence of 
research in information-theoretic secrecy. Physical layer 
security incorporates signal and code design to limit the 
information that can be extracted by an eavesdropper at 
the bit level, as a supplement to classical cryptographic 
security at the link or higher layers. Wyner's landmark 
paper on secure communications in a point-to-point 
wiretap channel [1] paved the way for characterizing the 
secrecy capacity of specific types of multiuser broadcast, 
interference, and multiple-access channels with single- 
antenna nodes [2]-[6], although their general secrecy 
capacity regions under fading remain mostly unknown. 
Similarly, the secrecy capacity achievable in multiple- 
input multiple-output (MIMO) multiuser networks is 
largely an open problem, with limited results avail- 
able for MIMO broadcast channels with two receivers 



[7]. In the majority of the literature on confidential 
transmissions in multiuser networks, knowledge of the 
probability distribution of the eavesdropper's channel is 
assumed at the transmitter, which inherently provides 
information about the number of eavesdropper antennas 
as well. 

Motivated by the above, this paper studies the effec- 
tiveness of simple beamforming strategies for maintain- 
ing confidentiality in a MIMO downlink system with 
multiple legitimate multi-antenna receivers and a single 
passive eavesdropper with an unknown channel distribu- 
tion. A portion of the transmit power is used to broadcast 
the information signal vector with just enough power to 
guarantee a certain signal-to-interference-plus-noise ratio 
(SINR) for the intended receivers, and the remainder of 
the power is used to broadcast artificial noise in order to 
mask the desired signal from a potential eavesdropper 
The artificial interference is designed to be orthogonal to 
the information-bearing signals at the intended receivers, 
which ensures that only the eavesdropper suffers a SINR 
penalty. lamming potential eavesdroppers with artificial 
noise has been previously proposed for a point-to-point 
MIMO wiretap channel in [8], [9]. 

For the MIMO broadcast channel with independent 
signals, we compare the power efficiency and relative 
SINR of two different approaches: a zero-forcing beam- 
forming design, and an iterative minimum-power joint 
transmit-receive beamformer design with a minimum 
SINR constraint per user The zero-forcing solution 
allocates slightly lower power for artificial noise at low 
transmit power levels, but enjoys a significant advantage 
in terms of complexity. For the MIMO multicast channel, 
an iterative minimum-power optimal beamformer design 
is employed with a minimum mean square error (MMSE) 
criterion for each user 

In the next section, the mathematical models for the 
MIMO broadcast and multicast channels are presented. 
The known algorithms for zero-forcing beamforming 
and the optimal minimum-power beamformer design are 
outlined in Section |llll The wiretapping strategies that 
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a potential eavesdropper could employ are described in 
Section JV] The resulting system performance is studied 
via simulation in Section |Vl and concluding remarks are 
presented in Section |Vll 

Notation: £{■} denotes expectation, (•)^ the transpose, 
(•)^ the Hermitian transpose, Tr(-) is the trace operator, 
[A]p ^ denotes the (p, q) entry of matrix A, diag {x} is 
a diagonal matrix with vector x on the diagonal, ||-||2 is 
the Euclidean norm, 1 is a column vector of ones, and 
I is an identity matrix of appropriate dimension. 

II. MATHEMATICAL MODEL 

The network under consideration is comprised of 
a A'^j-antenna transmitter broadcasting to K legitimate 
receivers with A'^. antennas each, and a single passive 
eavesdropper with N^. antennas in the vicinity of the 
network. For the moment, we assume K < Nt, and also 
remark that the proposed secrecy scheme is valid for 
an arbitrary number of eavesdroppers. The transmitter is 
assumed to have perfect channel state information (CSI) 
for all of the intended receivers, but is unaware of either 
the instantaneous CSI or the distribution of the CSI for 
the eavesdropper. This lack of information precludes the 
use of secrecy capacity as our performance metric, thus 
we choose to work directly with SINR. The transmitter's 
primary objective is to allow each of the desired receivers 
to recover the transmitted data with a certain SINR, 
while denying the eavesdropper as much information as 
possible about the data. Similar to the approaches taken 
in [8], [9], this will be accomplished by transmission of 
a jamming signal simultaneously with the data intended 
for the desired receivers. 

We will treat two separate cases: (1) transmission of 
a unique data symbol to each of the K users, referred 
to as 'broadcasting', and (2) sending the same com- 
mon information signal to all receivers, referred to as 
'multicasting.' The data model for these two scenarios 
is detailed below. 

A. MIMO Broadcast Channel 

In the broadcast scenario considered here, the trans- 
mitter wishes to send a private, independent scalar mes- 
sage Zk to each receiver. The transmitter employs a linear 
Ntxl transmit beamformer for the information sym- 
bol Zk of each intended receiver, and is assumed to have 
a total power constraint P encompassing information 
transmission and jamming. We denote the information 
signal by the K x 1 vector z = {zi, . . . , zk)'^ , and 
the jamming signal by the A'^t x 1 vector z'. Assume 
unit-norm transmit beamformers t^t^ = 1, and symbol 
power = pkP, where < < 1 is the fraction 



of the power devoted to the information signal of user 
k, and p = J2k=i Pk is the fraction of the total power 
used for information transmission. 
Define 

f{z'z'^} = Q; Tr(Q'J = (1 - p)P, 

and let T = [ti ... t^'] denote the aggregate transmit 
beamforming matrix. The signal broadcast by the trans- 
mitter is then given by 

x = Tz + z'. (1) 

In a flat-fading scenario, the received signal at the k*^ 
legitimate receiver, k = \, . . . ,K, can be written as 

K 

Yk = HfctfcZfc + ^ HfctjZj + Hfcz' + rifc, (2) 

where H/^. is the corresponding Nj. x Nt channel matrix 
between the transmitter and user k, and is the 
naturally occurring i.i.d additive white Gaussian noise 
vector with covariance (?{n;,n^} = fi^I. Analogous 
parameters can be defined for the eavesdropper, who 
receives 

K 

ye = He^tjZj +Hez' + ne. (3) 

J=l 

The A;*'* receiver uses a A^^^. x 1 beamformer to recover 
its information, which leads to the decision variable 

K 

Zk = WkHktkZk+Wkilk tjZj+wf Hfcz' + wf rifc. 

(4) 

B. MIMO Multicast Channel 

In the case of multicast, a common information sym- 
bol z with power <S{|2;p} = pP is transmitted to all K 
receivers. This necessitates the use of a common Ntxl 
transmit beamformer u, with u^u = 1. Assuming the 
same power constraints and artificial noise properties as 
in Section III-AI the transmitted signal is 

x = uz + z! . (5) 

The received signals are now 

Yk = Hfcuz + Hfcz' + rifc (6) 

Ye = HeUZ + HeZ' + He, (7) 

and the k^^ receiver employs & Nj- x 1 beamformer 
to obtain its decision variable as 

% = rfHfcUz + r^Hfcz' + rfnfc. (8) 
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C. Artificial Noise 

As will be discussed in the next section, our goal 
will be to minimize the total transmit power required 
to achieve a certain SINR for each receiver, and use all 
remaining power to jam the eavesdropper. To achieve this 
goal, we will choose the transmit and receive beamform- 
ers in such a way that the jamming signal does not impact 
the quality of the desired receiver's signal. Assuming the 
transmitter is aware of the beamformers used by each of 
the receivers, an effective downlink channel to the K 
receivers can be constructed for either the broadcast or 
multicast case as follows: 

T 



H 



Hi 



H 



K 



(9) 



where = (wf H^.) or = (rf H^) . When 
K < Nt, the jamming signal z' can be chosen from 
the nuUspace of H in order to guarantee that it does not 
impact the desired receivers. If K > Nt, the nuUspace of 
the effective downlink channel does not exist in general, 
and the artificial noise could not be guaranteed to be 
orthogonal to the desired signals. Although the artificial 
noise can still be constructed so as to minimize its impact 
at the receivers (e.g., by forcing it to lie in the right sub- 
space of H with smallest singular value), a scheduling 
strategy to ensure K < Nt may be more appropriate in 
the context of this work. We note that user scheduling 
in wireless networks with secrecy considerations has 
received limited attention thus far. 

III. BEAMFORMING DESIGN 

In either the broadcast or multicast case, the design 
of the transmit and receive beamformers is, in gen- 
eral, coupled; that is, the choice of tfe,u depends on 
the choice of Wfc,rfe respectively, and vice versa. One 
solution to this problem is to fix the beamformer on 
one end of the link and then optimize the other. An 
optimal approach would design the beamformers jointly, 
although at the expense of increased complexity [12]- 
[15]. In this paper, we consider both types of approaches. 
In the first, zero-forcing at the transmitter is used for 
design of the transmit beamformers in the broadcast case; 
this eliminates multi-user interference at each receiver, 
and leads to a simple maximum-ratio combiner at each 
receiver. In the second approach, we consider the optimal 
joint beamformer design problem for both the broadcast 
and multicast cases. The lack of eavesdropper CSI pre- 
empts the development of beamforming designs tailored 
towards maximizing a particular secrecy metric; hence 
we utilize existing precoding methods as discussed in 
the sequel. 



A. Zero-Forcing Beamforming 

In this section, we adopt a modified version of the 
coordinated zero-forcing beamforming approach in [11]. 
Assume that K < Nt, and for user k, define as 



hfc+i 



h 



K 



(10) 



The singular value decomposition (SVD) of H/^. yields 

H 



(11) 



where is the matrix of left singular vectors, 
is the diagonal matrix of singular values, v^,'^^ is the 
right singular vector associated with the smallest (zero) 
singular value, and V^'*^ is the collection of right singular 
vectors corresponding to other singular values. 

Evidently, v^,''^ is a logical choice for the k^'^ trans- 
mit beamformer given the objective of nulling all 
multiuser interference. Since receiver k then sees only 
its desired signal in spatially white noise, the optimal 
receive beamformer is simply the maximum-ratio 
combiner: 

Wk = Hfctfe. (12) 

Assuming that the jamming signal is orthogonal to 
w^Hfe, the SINR at user k can then be written as 



SINRi 



PfcP|wfHfctfcp 



(13) 



For a target SINR Sk, the required power allocation for 
user k can be calculated as 

B. Optimal Minimum Transmit Power Beamforming with 
per-user SINR constraint 

Although relatively simple, the proposed zero-forcing 
algorithm in Section IIII-AI will not in general mini- 
mize pP. To minimize the transmit power necessary 
to achieve the desired SINR, it is necessary to jointly 
design the transmit and receive beamformers [12]-[15]. 
Since the optimal beamformers will not be of the zero- 
forcing type, the downlink beamformer design problem 
is non-convex due to the interdependence of the problem 
variables. This issue can be overcome by exploiting the 
SINR duality of the downlink and uplink channels, which 
states that the minimum sum power required to achieve 
a set of SINR values on the downlink is equal to the 
minimum sum power required to achieve the same SINR 
vector on the dual uplink channel [15]. Therefore, as 
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a benchmark we compute the optimum transmit/receive 
beamformers and power allocation that minimizes the 
sum transmit power while satisfying the SINR constraint 
per user based on [14], [15]. 

Let t^*'*, w^*-*, pf^ and g^*^ represent the trans- 
mit/receive beamformers and downlink/uplink power al- 
location for user k at the i*^ iteration. Define Qg^k for 
s,k = 1, . . . , K as the signal and interference powers 
for each user: 

2 

for uplink 



9s± 



H 



(15) 



for downlink 



The SINR per stream on either link can then be written 
as 



Ik 



•^k \9s,s\ 



1 + Y^f=l,ijts \9s,i\ 

where Xk is the power allotted to user k either on the 
downlink or the dual uplink channel. Finally, define 
matrices C and D as 



(16) 



[C] 



s,k 




D = diag 



7th 
91,1 



if s^k 
if s = k 

1th 1 



9k,k 



(17) 



(18) 



The iterative beamformer design that minimizes the 
transmit power can be summarized as follows. 

1) Set the initial transmit beamformers to the zero- 
forcing solution t^*^^ = v^'''', with an initial power 
allocation p^^^ = P/K per user. Compute the 
optimum set of receive beamformers as 



w 



Pk *fc Z^Pk ^k^k *fc Wfc +i 



K 



\i=l 



(19) 

2) Now consider the dual uplink channel where the 
transmit beamformers from Step 1 serve as the 
receive beamformers, and vice versa. Update the 
power allocation vector q(*+^) = x* from 

X* = (I- DC)^^D1, (20) 

then update the beamformer set using (|2T]) : 



K 



(|20l ). Calculate the downUnk SINR set using (|T6l ) 
and compare with the uplink SINR vector from 
Step 2 for convergence. If the stopping criterion is 
not satisfied, set i = i + 1 and return to Step 2, 
otherwise terminate the algorithm. 

C. Optimal Minimum Transmit Power Beamforming 
with per-user MSE constraint 

Despite superficial similarities, the beamforming de- 
sign problems with per-user SINR constraints for the 
broadcast and multicast channels are fundamentally dif- 
ferent. Many efficient numerical solutions exist for the 
former as cited in Section IIII-Al whereas the multicast 
problem is known to be non-convex even for the MISO 
case with single antennas at each receiver. A number of 
approximate solutions based on semidefinite relaxation 
techniques have been proposed for the MISO multicast 
channel, e.g. [16], [17]. 

However, the MIMO multicast beamforming problem 
was recently reformulated as a convex optimization by 
replacing the per-user SINR requirements with minimum 
MSE constraints [18]. In this case, the optimal receiver 
structure is known to be MMSE, which allows an alter- 
nating iterative optimization of the transmit and receive 
beamformers. The minimum sum-power optimization 
problem can be expressed as a convex second-order cone 
program (SOCP): 



min t 



s.t. 



U 



l2 ^ ^' 
I2 ^ \f^- 



(22) 



wk, yk 

where £k is the MMSE constraint per user, Vk 
1, and Wk = t"^ Tr {1 



In brief, the algorithm is initialized with random 
receive beamformers, after which the corresponding op- 
timal transmit beamformer is computed by solving (l22l ). 
The receive beamformers are updated using the MMSE 
criterion as 

Vk = u^H|^ (HfcUu^H^ + all) , (23) 



\i=l 



(21) 

Calculate the achieved SINR set on the uplink 
using (IT6l ). and go to Step 3. 
3) Revert back to the downlink channel and recom- 



pute the power allocation vector p 



X usmg 



and the iterations continue until convergence. For con- 
sistency with our choice of SINR as the performance 
metric, the following equivalence relation between max- 
imilm SINR and MMSE is useful: 

/ ek = . (24) 

■ " 1 + SINRfc ^ ' 

Remark 1: For both zero-forcing and joint minimum- 
power beamformer designs, the computations are carried 
out at the transmitter, which then needs to supply the re- 
ceivers with information about the optimal beamformers. 
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This can be done using a limited (quantized) feedforward 
scheme, as proposed in [19]. 

Remark 2: The assumption of perfect CSIT of the 
intended receivers is admittedly a strong one. Robust 
beamforming design for the MIMO downlink with multi- 
antenna receivers is an ongoing research problem, with 
some recent results provided in [20]. However, incorpo- 
rating artificial noise into any such robust beamforming 
schemes is not a straightforward extension, since the lack 
of exact receiver CSI at the transmitter would no longer 
allow any artificial noise to be perfectly orthogonal to 
the intended receivers. The authors have conducted a 
perturbation analysis to capture the performance degra- 
dation in single-user MIMO wiretap channels [21], and 
an extension to the downlink case is in progress. 

Remark 3: As mentioned previously, the assumption 
that the number of receivers is less than the number 
of transmit antennas in Section II-C can be relaxed by 
implementing a user selection stage prior to transmis- 
sion. The authors have shown in [22] that a greedy 
algorithm which schedules the user set based on max- 
imizing the transmit power available for artificial noise 
performs close to an optimal exhaustive search in terms 
of eavesdropper BER. 

IV. WIRETAPPING STRATEGIES 

We consider two types of eavesdropper strategies: 
(1) a simple linear receiver approach in which the 
eavesdropper attempts to maximize the SINR of the 
data stream she is interested in decoding, and (2) a 
multi-user decoding scheme in which the eavesdropper 
uses maximum likelihood detection to decode all K 
information-bearing waveforms. We begin by illustrating 
approach (1) for the broadcast case, with the extension 
to the multicast channel being straightforward. Assume 
that the eavesdropper seeks to recover the data stream 
of user k from her received signal given in Q. The 
interference-plus-noise covariance matrix given that Zj^ 
is the symbol of interest is 

K 

= He ^ tjtfU^ + HeQ^Hf + a^I. (25) 

The maximum SINR beamformer for the data stream of 
user k is then given by 



(Qe) 'h 



(26) 



The use of an optimal beamformer here presumes that 
Hetfc, k = I, . . . , K is somehow known at the eaves- 
dropper. Using this approach, the SINR at the eaves- 
dropper can be calculated to be 

-1 



An eavesdropper with more extensive computational 
resources will attack the MIMO broadcast network using 
a more sophisticated approach. In general, the optimal 
decoder at the eavesdropper in terms of minimizing the 
symbol error rate would be the following Maximum 
Likelihood (ML) detector: 



are mm 
zez 



(y^ _ HeTz] 



(28) 



where Z is the signal space from which z is drawn, 
and Qe = HeP'^H^ + fTgl is the interference -plus-noise 
covariance matrix perceived by the eavesdropper. 

In the next section, we present numerical examples 
that show the SINR and the BER that the eavesdropper 
experiences with the proposed jamming scheme. 

V. SIMULATION RESULTS 

We investigate the performance of the eavesdropper 
and the desired receivers as a function of the target 
SINR at the receivers and the total available transmit 
power. In each simulation, we assume a transmitter 
with Nt = 4: antennas, K = 3 legitimate receivers 
with Nr = 2 antennas each, and an eavesdropper with 



4 antennas. The channel matrices for all links 



are composed of independent Gaussian random variables 
with zero mean and unit variance. The background noise 
power is assumed to be the same for all K receivers and 
the eavesdropper: o"^ = (jg = 1. The algorithm of [14] is 
used to implement the optimal joint beamformer design, 
and the SOCP in ^ was solved using the MATLAB 
cvx optimization toolbox [23]. All of the displayed 
results are calculated based on an average of 5000 trials 
with independent channel and noise realizations. 




SINR, 



'e,k 



(27) 



20 25 
Transmit Power P (dB) 



Fig. 1. Power fraction versus transmit power P for K = 3 users, 
Nt = 4, TVr = 2, iVe = 4 antennas. 
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Figure [T] displays the average fraction of the transmit 
power allocated to data and artificial noise by the zero- 
forcing and the optimal minimum transmit power beam- 
forming algorithms with an SINR threshold of 5 dB. 
The joint design requires roughly 10% less transmit 
power at small to intermediate power levels, albeit with 
a significantly greater level of complexity. The curve 
labeled "User 1,ZF" represents the fraction of the total 
power assigned to an arbitrary user (referred to as user 1) 
among the three legitimate receivers. 
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-X — Usen.ZF 

— User 1, Joint [14| 
-e — Eavesdropper, ZF 
-A — Eavesdropper, Joint [14] 




20 25 
Transmit Power P (dB) 



Fig. 2. SINR versus transmit power P for K = 3 users, Nt — 
4, iV,. = 2, iVe = 4 antennas. 

Figure |2] shows the achieved SINR levels versus 
transmit power P for user 1 and the average SINR 
averaged over all three streams for the eavesdropper 
when using single-user detection. The legitimate receiver 
almost always achieves the desired SINR target of 5 dB, 
while the eavesdropper has a significantly lower SINR 
due to the artificial noise. The SINR of user 1 is slightly 
below 5 dB for transmit powers of 10 and 15 dB, since 
there were a few trials for which the 5 dB SINR target 
could not be achieved. In such cases, the transmitter 
devotes all power to the desired receivers and none to 
jamming, and the resulting SINR is averaged in with the 
other trials. Note that there is not a significant difference 
in performance for the eavesdropper whether the zero- 
forcing or optimal broadcast beamformers are used. 

Figure |3] compares the eavesdropper's BER with and 
without artificial noise when the eavesdropper employs 
MIMO ML detection, assuming an uncoded BPSK- 
modulated information signal z and zero-forcing trans- 
mit beamforming. For low target SINRs, we observe 
a significant degradation in the eavesdropper's inter- 
ception capabilities, e.g., by approximately 10.5 dB at 
BER = 0.05. A more modest gain of 2.5 dB is achieved 
at BER = 10"^ for intermediate target SINRs. At 



-Q — With Jamming 
-B — No Jamming 



P = 20dB 




4 6 8 10 12 14 16 18 

Desired SINR Ttirestioid S (dB) at intended Receivers 



Fig. 3. Eavesdropper maximum-likelihood BER versus target SINR 
5 for /C = 3 users, Nt = 4, Nr = 2, Ne = i antennas. 



high SINR thresholds, the two curves converge since 
the transmitter is constrained to allocate progressively 
smaller fractions of the total power to jamming. 




10 15 20 

Transmit Power P (dB) 



Fig. 4. Power fraction versus transmit power P for K — 3 users, 
Nt = 4, A^r = 2, iVe = 4 antennas. 



Figure |4] displays the fraction of the transmit power 
allocated to data and artificial noise by the multicast min- 
imum transmit-power beamforming algorithm of Sec- 
tion HITCl with SINR thresholds of S = 5 dB, 10 dB. 
The lack of inter-user interference allows the transmitter 
to allocate more power for jamming compared to the 
broadcast case for the same transmit power. 

Figure [5] shows the average achieved SINR levels 
at the intended receivers and the eavesdropper versus 
transmit power P for user SINR thresholds of = 5 
dB, 10 dB. As before, the legitimate receivers achieve 
the desired SINR targets, while the eavesdropper's per- 
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-B — Users, S = 5dB 
— Users, S = 10dB 
—A — Eavesdropper, S = 5dB 
-0 — Eavesdropper, S = 10dB 




15 20 
Transmit Power P (dB) 



Fig. 5. SINR versus transmit power P for K 
4, Nr ^ 2,Ne ^ 4 antennas. 



3 users, Nt 



formance is degraded. However, the degradation in the 
eavesdropper's SINR is not as severe as in the broadcast 
case since there is no multiuser interference to compound 
the effect of the artificial noise. 

VI. CONCLUSION 

This paper has examined beamforming strategies com- 
bined with artificial noise for providing confidentiality at 
the physical layer in multiuser MIMO wiretap channels. 
For the MIMO broadcast channel with single-user de- 
tection at the eavesdropper, the zero-forcing beamformer 
design is shown to provide an acceptable level of per- 
formance in terms of relative SINR when compared to 
optimal joint transmit-receive beamforming algorithms. 
The use of artificial noise is meaningful even when the 
eavesdropper employs optimal ML joint detection for the 
information vector. For the MIMO multicast channel, the 
degradation in the eavesdropper's SINR as the transmit 
power increases is not as severe, but artificial noise is 
still seen to be effective. 
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